Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa
File:                     3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa (raw, json)
Hash identifier:          fsQA1b6Po7J5aHJLxTczgF0U/JPfW2QIy85ataeKWPA=
Subject key identifier:   31:D7:59:F5:7A:81:AE:01:45:6F:AF:B9:D4:7D:48:35:50:82:DF:2E
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       435B1CEC54A6F541DBB237CE0BA158A849EF4B71
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa
Signing time:             Wed 04 Feb 2026 20:40:15 +0000
ROA not before:           Wed 04 Feb 2026 20:35:15 +0000
ROA not after:            Wed 03 Feb 2027 20:40:15 +0000
asID:                     271562
IP address blocks:        181.174.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5b:1c:ec:54:a6:f5:41:db:b2:37:ce:0b:a1:58:a8:49:ef:4b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Feb  4 20:35:15 2026 GMT
            Not After : Feb  3 20:40:15 2027 GMT
        Subject: CN=31D759F57A81AE01456FAFB9D47D48355082DF2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:23:8e:30:88:26:91:2c:7c:90:82:26:95:
                    4b:74:57:37:85:04:66:86:bb:fd:b7:41:7b:bb:c2:
                    47:22:e7:3d:55:42:dd:c3:0c:21:0c:19:85:ae:e0:
                    8b:51:e3:5b:cc:51:e9:99:54:f7:70:4d:76:f9:45:
                    f4:df:2a:7d:07:30:d5:1c:e7:a8:29:18:98:eb:98:
                    d9:02:03:6e:89:3b:4c:ae:6c:aa:6e:43:79:c8:e0:
                    4e:3f:d0:b5:af:70:ae:07:42:b8:c1:04:86:9d:18:
                    ef:20:09:b0:da:00:f0:4f:c9:1e:e0:b1:2b:16:a0:
                    7a:37:b6:4b:c0:42:72:df:d0:1c:68:31:ce:ef:0f:
                    0b:52:34:40:24:f7:af:ab:4b:95:bd:31:c3:c2:d6:
                    8c:42:0a:31:82:9c:3a:1b:d6:04:4f:89:31:01:aa:
                    7a:9e:8d:b8:1c:03:68:9d:a6:15:51:84:4b:65:6c:
                    da:f3:b1:d0:f6:f7:3a:b9:e9:2f:8f:b6:02:84:28:
                    f8:e2:1a:0c:d2:87:89:28:6e:80:91:c3:0d:9a:c8:
                    9d:56:91:0a:ae:02:6f:7b:b1:ad:bc:c3:e3:74:11:
                    56:4b:c7:cb:2a:5f:0f:dc:b9:f4:97:5c:3c:7d:d1:
                    5f:be:1d:a2:2e:3c:79:99:91:2c:79:2a:b6:73:fc:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D7:59:F5:7A:81:AE:01:45:6F:AF:B9:D4:7D:48:35:50:82:DF:2E
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:af:59:f3:11:c6:1b:3b:07:f6:5b:6d:27:b2:71:01:1b:b0:
         0e:ef:72:10:cf:b1:26:2e:75:78:7d:6b:28:d4:17:da:b5:22:
         f4:5e:b6:b2:e6:52:9b:92:51:39:15:c0:de:97:5f:49:98:7f:
         d5:c6:9c:74:8f:57:29:f5:d5:97:cb:2d:dc:19:68:eb:b2:07:
         a0:05:f5:01:10:2b:11:db:47:c8:10:96:37:77:87:15:9a:be:
         b0:dc:b6:19:df:88:98:5f:7f:14:5c:ef:ed:28:11:ab:98:65:
         1f:0b:4b:c6:c5:26:46:ae:88:a1:e3:f3:73:a6:4e:4f:c5:02:
         db:a4:cc:8b:17:c0:60:47:07:08:29:b9:d7:5f:dc:97:5c:b7:
         b8:4d:3c:5d:da:58:04:96:37:1d:d4:20:10:6c:9a:70:64:a9:
         13:00:dd:d2:ab:fd:c4:ac:74:f8:16:ec:6d:f7:82:bc:44:b6:
         a8:6a:71:b5:a2:76:44:56:da:d7:31:df:48:33:28:73:62:48:
         47:59:c9:fb:45:15:4d:3d:15:3c:54:5c:23:2c:a5:12:31:60:
         c0:84:41:66:06:b1:46:2a:ca:3a:46:af:21:a3:2d:62:55:e7:
         b9:92:3c:59:08:3b:f7:32:95:d8:96:80:0b:80:b9:69:ac:74:
         6d:23:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:17 2026 by rpki-client